7846 matches found
PT-2006-6768 · Unknown · Link Exchange Lite
Name of the Vulnerable Software and Affected Versions: Link Exchange Lite affected versions not specified Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved via two methods: - the search engine field to...
WoltLab Burning Board Lite thread.php decode_cookie Function threadvisit Cookie Parameter SQL Injection
The remote version of Burning Board Lite fails to sanitize user- supplied cookie input before using it in the 'decodecookie' function in a database query. Regardless of PHP settings, an unauthenticated attacker may be able to leverage this issue to uncover sensitive information such as password...
WoltLab Burning Board Lite wbb_userid Parameter PHP Unset SQL Injection
The remote version of Burning Board Lite fails to sanitize input to the 'wbbuserid' parameter before using it in a database query. Provided PHP's 'registerglobals' setting is enabled and 'magicquotesgpc' setting is disabled, an unauthenticated attacker may be able to leverage this issue to uncove...
lel-sql.txt
vendor site: http://softacid.net/ product:Link Exchange Lite bug: injection sql risk : high injection sql post : /search.asp post your sql query into the search engine field injection sql get: /linkslist.asp?psearch='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...
Woltlab Burning Board Lite 1.0.2 decode_cookie() SQL Injection Exploit
No description provided by source. ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 decodecookie sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org dork: "Powered by Burning Board Lite...
Wolflab Burning Board Lite 1.0.2 two sql injections
Wolflab Burning Board Lite 1.0.2 decodecookie sql injection exploit: http://retrogod.altervista.org/wbblite102sqlmqgbypass.html Wolflab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit: http://retrogod.altervista.org/wbblite102sql.html...
Woltlab Burning Board Lite 1.0.2 decode_cookie() SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Woltlab Burning Board Lite 1.0.2 decodecookie SQL Injection Exploit ====================================================================== ?php printr'...
Woltlab Burning Board Lite 1.0.2 - 'decode_cookie()' SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont=...
Woltlab Burning Board Lite 1.0.2 - decode_cookie() SQL Injection
Woltlab Burning Board Lite 1.0.2 - decodecookie SQL Injection 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; els...
Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection
Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection ?php printr' -------------------------------------------------------------------------------- Woltlab Burning Board Lite 1.0.2 ZendHashDelKeyOrIndex / / blind sql injection exploit by rgod [email protected] site: http://retrogod.altervista.org...
Woltlab Burning Board Lite 1.0.2 - Blind SQL Injection
126 $resul...
Link Exchange Lite [injection sql]
vendor site: http://softacid.net/ product:Link Exchange Lite bug: injection sql risk : high injection sql post : /search.asp post your sql query into the search engine field injection sql get: /linkslist.asp?psearch='sql laurent gaffi & benjamin moss http://s-a-p.ca/ contact: [email protected]...
googleHack Lite-vulnerability warning-the black bar safety net
Look at the basic situation: infxx.com return some basic information site:xx.com returns all the information about the url link:xx.com returns all the station made the connection of the station site:xx.com filetype:txt find TXT file the other in turn within the push Find the background site:xx.co...
Solaris 8 (sparc) : 109736-13
SunScreen 3.1 LITE sparc miscellaneous fixes. Date this patch was last updated by Sun : Mar/09/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2006-4429
PHP remote file inclusion vulnerability in handlers/email/mod.output.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter, a different vector than CVE-2006-4291. NOTE: This issue has been disputed by a...
CVE-2006-4429
PHlyMail Lite 3.4.4 and earlier (Build 3.04.04) are vulnerable to PHP remote file inclusion via a URL parameter in PM [path][handler], affecting handlers/email/mod.listmail.php (CVE-2006-4291) and handlers/email/mod.output.php (CVE-2006-4429). The issue enables arbitrary PHP code execution. The v...
PT-2006-5230 · Phlymail · Phlymail Lite
Name of the Vulnerable Software and Affected Versions: PHlyMail Lite versions 3.4.4 and earlier Description: A remote file inclusion issue allows attackers to execute arbitrary PHP code via a URL in the PM pathhandler parameter. This is a different attack vector. Note that this issue has been...
phlymail.txt
PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...
PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability
PHlyMail Lite PMpathlib= Remote File Include Vulnerability ------------------------------------------------------------------------------------------------------ - Script name: PHlyMail Lite v. 3.4.4 - Script site: http://phlymail.de...
CVE-2006-4291
PHP remote file inclusion vulnerability in handlers/email/mod.listmail.php in PHlyMail Lite 3.4.4 and earlier Build 3.04.04 allows remote attackers to execute arbitrary PHP code via a URL in the PMpathhandler parameter...